Privacy
Policy

The controller of your personal data is BIURO RACHUNKOWE GETAX Sp. z o.o., with its registered office in Bytom at ul. Tysiąclecia 20A/2, 41-933 Bytom, entered in the Polish National Court Register under KRS 0001133027, tax ID NIP 9542877939, REGON 529933200 (hereinafter: "Controller"). The ekspert-finansowy.eu website is operated by the Controller, while insurance distribution activities are performed by an authorized natural person in accordance with the Polish Financial Supervision Authority register.

For matters related to personal data protection, you can contact the Controller: • Email: kontakt@ekspert-finansowy.eu • Phone: +48 664 333 369 • Mail: ul. Tysiąclecia 20a/2, 41-933 Bytom, Poland

The Controller collects and processes the following categories of personal data:

a) Data provided in the contact form: • First and last name • Email address • Phone number • Message content • Selected inquiry topic • Vehicle, use, mileage, ownership and policy-expiry details where required for a quote • Driving-licence issue date where required for a quote • Documents voluntarily attached to the form, in particular the vehicle registration document and current policy

b) Data collected automatically when using the website: • Device IP address • Web browser type • Device type and operating system • Approximate location (country, region) • Date and time of visit • Pages visited • Traffic source (where visitors came from)

c) Data from cookies (with user consent): • Analytical identifiers • User preferences

Your personal data is processed for the following purposes:

a) Responding to contact inquiries • Legal basis: Art. 6(1)(b) GDPR (performance of a contract or taking steps prior to entering into a contract) • Retention period: until the end of correspondence, then for the limitation period for claims (3 years)

b) Direct marketing of own services • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller) • Retention period: until objection is raised

c) Website traffic analysis and improvement • Legal basis: Art. 6(1)(a) GDPR (user consent) or Art. 6(1)(f) GDPR (legitimate interest) • Retention period: according to analytics tool providers' policies

d) Fulfilling legal obligations • Legal basis: Art. 6(1)(c) GDPR (legal obligation) • Retention period: according to applicable regulations (e.g., 5 years for tax documentation)

e) Pursuing or defending against claims • Legal basis: Art. 6(1)(f) GDPR (legitimate interest) • Retention period: until the limitation period for claims expires

In connection with personal data processing, you have the following rights:

a) Right of access You have the right to obtain confirmation from the Controller whether your data is being processed and to access that data and information about its processing.

b) Right to rectification You have the right to request correction of inaccurate data or completion of incomplete data.

c) Right to erasure ("right to be forgotten") You have the right to request deletion of your data when it is no longer necessary for the purposes for which it was collected, consent has been withdrawn, data is processed unlawfully, or there is an obligation to delete it.

d) Right to restriction of processing You have the right to request restriction of data processing in certain cases (e.g., when you contest the accuracy of data).

e) Right to data portability You have the right to receive your data in a machine-readable format and transmit it to another controller.

f) Right to object You have the right to object at any time to processing based on legitimate interest, including direct marketing.

g) Right to withdraw consent If processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

h) Right to lodge a complaint You have the right to file a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise these rights, contact the Controller using the details provided in section 1.

Your personal data may be transferred to the following categories of recipients:

• IT and hosting service providers (e.g., servers, email) • Analytics tool providers (Google Analytics, Facebook Pixel) • Marketing service providers • Insurance companies (only to the extent necessary for preparing offers, with your consent) • Entities authorized under law (e.g., state authorities)

The Controller only uses services from entities that provide appropriate guarantees for the protection of personal data, in accordance with GDPR requirements.

In connection with the use of analytical and marketing tools (e.g., Google Analytics, Facebook Pixel), your data may be transferred to the United States or other countries outside the European Economic Area.

Transfers are based on: • Standard contractual clauses approved by the European Commission • European Commission adequacy decisions (where applicable)

You have the right to obtain a copy of the applied safeguards by contacting the Controller.

The website uses cookies – small text files stored on your device.

a) Types of cookies used:

Necessary (always active): • Session cookies enabling proper website functioning • Cookies remembering privacy settings

Analytical (with consent): • Google Analytics – website traffic analysis • Help understand how users interact with the website

Marketing (with consent): • Facebook Pixel – measuring advertising effectiveness • Google Ads – remarketing and conversion analysis

b) Cookie management:

On your first visit, a banner is displayed with cookie information and category selection options. You can change your preferences at any time by clicking the "Cookie settings" link in the footer.

You can also manage cookies through browser settings: • Chrome: Settings → Privacy and security → Cookies • Firefox: Settings → Privacy & Security → Cookies • Safari: Preferences → Privacy → Cookies • Edge: Settings → Privacy & services → Cookies

Disabling necessary cookies may cause the website to malfunction.

The Controller implements appropriate technical and organizational measures to ensure the protection of processed personal data, including:

• Connection encryption (HTTPS/SSL protocol) • Regular software updates • Limited access to personal data • Pseudonymization and data minimization • Regular backups • Staff training in data protection

Despite applying the highest security standards, no system provides 100% protection. In case of a data breach, the Controller will promptly inform affected individuals if the breach may pose a high risk to their rights and freedoms.

The Controller reserves the right to make changes to this Privacy Policy. Changes may result from:

• Changes in applicable laws • Changes in data processing methods • Introduction of new website features • Changes in tools used

The Controller will inform about significant changes through a visible notice on the website. We encourage you to regularly review this Privacy Policy.

For questions regarding this Privacy Policy or personal data processing, please contact:

BIURO RACHUNKOWE GETAX Sp. z o.o. KRS 0001133027, NIP 9542877939, REGON 529933200 ul. Tysiąclecia 20a/2 41-933 Bytom, Poland

Email: kontakt@ekspert-finansowy.eu Phone: +48 664 333 369